Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,916

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,565

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1561–1590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-0577	medium	5.3/10	code-projects Online Product Reservation System prod.php unrestricted upload	Jan 4, 2026 6mo ago
CVE-2026-0576	medium	6.9/10	code-projects Online Product Reservation System Parameter prod.php sql injection	Jan 4, 2026 6mo ago
CVE-2026-0575	medium	6.9/10	code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection	Jan 4, 2026 6mo ago
CVE-2026-0570	medium	6.9/10	code-projects Online Music Site Feedback.php sql injection	Jan 2, 2026 6mo ago
CVE-2026-0569	medium	6.9/10	code-projects Online Music Site AlbumByCategory.php sql injection	Jan 2, 2026 6mo ago
CVE-2026-0568	medium	6.9/10	code-projects Online Music Site ViewSongs.php sql injection	Jan 2, 2026 6mo ago
CVE-2026-0567	medium	6.9/10	code-projects Content Management System pages.php sql injection	Jan 2, 2026 6mo ago
CVE-2026-0566	medium	5.1/10	code-projects Content Management System edit_posts.php unrestricted upload	Jan 2, 2026 6mo ago
CVE-2025-15438	medium	5.1/10	PluXml Media Management medias.php __destruct deserialization	Jan 2, 2026 6mo ago
CVE-2026-0565	medium	6.9/10	code-projects Content Management System delete.php sql injection	Jan 2, 2026 6mo ago
CVE-2026-0547	medium	5.3/10	PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload	Jan 2, 2026 6mo ago
CVE-2026-0546	medium	6.9/10	code-projects Content Management System search.php sql injection	Jan 2, 2026 6mo ago
CVE-2025-15426	medium	6.9/10	jackying H-ui.admin preview.php unrestricted upload	Jan 2, 2026 6mo ago
CVE-2025-15423	medium	5.3/10	EmpireSoft EmpireCMS connect.php CheckSaveTranFiletype unrestricted upload	Jan 2, 2026 6mo ago
CVE-2025-15422	medium	6.9/10	EmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism	Jan 2, 2026 6mo ago
CVE-2025-15410	medium	6.9/10	code-projects Online Guitar Store login.php sql injection	Jan 1, 2026 6mo ago
CVE-2025-15409	medium	6.9/10	code-projects Online Guitar Store Delete_product.php sql injection	Jan 1, 2026 6mo ago
CVE-2025-15408	medium	6.9/10	code-projects Online Guitar Store Create_product.php sql injection	Jan 1, 2026 6mo ago
CVE-2025-15407	medium	6.9/10	code-projects Online Guitar Store Create_category.php sql injection	Jan 1, 2026 6mo ago
CVE-2025-15406	medium	5.3/10	PHPGurukul Online Course Registration authorization	Jan 1, 2026 6mo ago
CVE-2025-15405	medium	5.3/10	PHPEMS cross-site request forgery	Jan 1, 2026 6mo ago
CVE-2025-15404	medium	5.3/10	campcodes School File Management System save_file.php unrestricted upload	Jan 1, 2026 6mo ago
CVE-2026-0544	medium	6.9/10	itsourcecode School Management System index.php sql injection	Jan 1, 2026 6mo ago
CVE-2025-15398	medium	6.3/10	Uasoft badaso Token BadasoAuthController.php forgetPassword password recovery	Dec 31, 2025 6mo ago
CVE-2025-15394	medium	5.1/10	iCMS POST Parameter ConfigAdmincp.php save code injection	Dec 31, 2025 6mo ago
CVE-2025-15393	medium	5.3/10	Kohana KodiCMS Layout API Endpoint file.php save code injection	Dec 31, 2025 6mo ago
CVE-2025-15392	medium	5.3/10	Kohana KodiCMS Search API Endpoint page.php like sql injection	Dec 31, 2025 6mo ago
CVE-2019-25262	medium	5.1/10	elinicksic Razgover Chat Message send.php cross site scripting	Dec 31, 2025 6mo ago
CVE-2025-15390	medium	5.3/10	PHPGurukul Small CRM edit-user.php authorization	Dec 31, 2025 6mo ago
CVE-2025-15375	medium	5.3/10	EyouCMS arcpagelist Ajax.php unserialize deserialization	Dec 31, 2025 6mo ago